Lucene search
HistoryMar 26, 2001 - 5:00 a.m.
CVE-2001-0201
cve-2001-0201
postaci
postgresql
sql injection
security vulnerability
remote attack
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.9%
The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program.
| CPE | Name | Operator | Version |
|---|---|---|---|
| umut_gokbayrak:postaci | umut gokbayrak postaci | eq | 1.1.3 |
| umut_gokbayrak:postaci | umut gokbayrak postaci | eq | 1.1.2 |
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.9%